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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
subject patent application. 

Listing of Claims: 

Claim 1 (Original): An encrypting device comprising: 

key generation means for generating two prime numbers p and q of which product 
is n=pq as a private key and generating as a public key gl and g2 respectively given by 
the following Equations (1) and (2) using two random numbers s and t and a maximal 
generator g in a multiplicative group of integers modulo n; and 

encrypting arithmetic means for, in response to receipt of a plaintext m, generating 
a ciphertext C=(C1, C2) respectively given by the following Equations (3) and (4) using 
the public key {gl, g2}, a private key n, and random numbers rl and r2, 



where gcd{s, q- 1 } = 1 and gcd{t, p-1 } = 1 . 

Claim 2 (Currently Amended): An encrypting device comprising: 
key generation means for generating prime numbers p and q of which product is 
n=pq, where p is a private key, and generating as a public key gl given by the following 
Equation (1) using a random number s and a maximal generator g in a multiplicative 
group of integers modulo n; and 



gi=g ,(p " !) (mod n), 
g 2 =g t(q ' ,) (mod n), 
Ci=m'g! rl (mod n), 
C 2 =m-g 2 r2 (mod n), 



(1) 
(2) 
(3) 
(4) 
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encrypting arithmetic means for, in response to receipt of a plaintext m, generating 
a ciphertext C given by the following Equation (3)' using the public key gl, a private key 
n, and a random number r, 

g,=g ,(p - I) (mod n), (1) 

C=m gl r (modn), (3)' 
where when information b is a size of p (bits), 0<m<2 b "' and gcd{s, q- 
1} = 1. 

Claim 3 (Original): The encrypting device according to claim 1, wherein: 
e given by the following equation: e=h(d) (h is one-way hash function), where 
d=(Ci+C 2 )/m (mod n), is added to the ciphertext C=(Ci, C 2 ) so as to be a ciphertext 
C=(C,,C 2 , e). 

Claim 4 (Original): The encrypting device according to claim 1 , further 
comprising: 

a database for saving data resulting from calculation of a random number portion 
of the ciphertext C. 

Claim 5 (Original): The encrypting device according to claim 1, wherein: 
the encrypting arithmetic means encrypt only a plaintext element ml, which is a 
first element in the plaintext m, to the ciphertext element Ci=(Cn, Ci 2 ), and ciphertext 
elements following the ciphertext element C\ are generated using a received plaintext m i5 
bit information of the plaintext m b and two random numbers Rj or R 2 which are 
contained in the ciphertext Cj. 

Claim 6 (Original): A decrypting device wherein included are decrypting 
arithmetic means for receiving a ciphertext C=(C l5 C 2 ), which is an encrypted plaintext 
m, respectively given by the following Equations (3) and (4) using a public key {g h g 2 }, 
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a private key n, and random numbers rl and r2, the private key n being n=pq where p and 
q are prime numbers generated as a private key, gl and g2 being respectively given by 
the Equations (1) and (2) using two random numbers s and t and a maximal generator g in 
a multiplicative group of integers modulo n, and 

performing decryption in such a manner so as to generate received ciphertexts a 
and b respectively given by the following Equations (5) and (6) using the Fermat's little 
theorem and then derive the plaintext m satisfying the following Equation (7) from the 
received ciphertexts a and b using the Chinese remainder theorem, 



g,=g s(p - l) (mod n), 


(1) 


g 2 =g t(q - ,) (modn), 


(2) 


Ci=m-gi rl (mod n), 


(3) 


C 2 =m-g 2 r2 (mod n), 


(4) 


a=Ci (mod p)=m (mod p), 


(5) 


b=C 2 (mod q)=m (mod q), 


(6) 


m=aAq+bBp (mod n), 


(7) 



where gcd{s, q-1 } = 1, gcd{t, p-l} = l, Aq (mod p)=l, and Bp (mod q)=l. 

Claim 7 (Original): A decrypting device wherein included are decrypting 
arithmetic means for receiving a ciphertext C of an inputted plaintext m, given by the 
following Equation (3)' using a public key gl, a private key n, and a random number r, 
the private key n being n=pq where p and q are prime numbers, p being generated as a 
private key, gl being given by the following Equation (1) using a random number s and a 
maximal generator g in a multiplicative group of integers modulo n, and 

performing decryption in such a manner so as to derive the plaintext m satisfying 
the following Equation (8) using the Fermat f s little theorem, 

grg'^^modn), (1) 

C=m-g, r (mod n), (3) ! 

m=C (mod p), (8) 
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Claim 8 (Original): A cryptosystem comprising: 

an encrypting device including: key generation means for generating two prime 
numbers p and q of which product is n=pq as a private key and generating as a public key 
gl and g2 respectively given by the following Equations (1) and (2) using two random 
numbers s and t and a maximal generator g in a multiplicative group of integers modulo 
n; and encrypting arithmetic means for, in response to receipt of a plaintext m, generating 
a ciphertext C=(Ci, C 2 ) respectively given by the following Equations (3) and (4) using 
the public key {gi, g 2 }, a private key n, and random numbers rl and r2; and 

a decrypting device including decrypting arithmetic means for receiving ciphertext 
elements C j and C 2 calculated by the encrypting device and performing decryption in 
such a manner so as to generate received ciphertexts a and b respectively given by the 
following Equations (5) and (6) using the Fermat's little theorem and then derive the 
plaintext m satisfying the following Equation (7) from the received ciphertexts a and b 
using the Chinese remainder theorem, 



g 1 =g s(p - 1) (mod n), 


(i) 


g 2 =g t(q " 1) (mod n), 


(2) 


Ci^m-gi rl (mod n), 


(3) 


C 2 =m-g 2 r2 (mod n), 


(4) 


a=d (mod p)=m (mod p), 


(5) 


b=C 2 (mod q)=m (mod q), 


(6) 


m=aAq+bBp (mod n), 


(7) 



where gcd{s, q-l} = l, gcd{t, p-l} = l, Aq (mod p)=l, and Bp (mod q)=l . 
Claim 9 (Original): A cryptosystem comprising: 

an encrypting device including: key generation means for generating prime 
numbers p and q of which product is n=pq, where p is a private key, and generating as a 
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public key gl given by the following Equation (1) using a random number s and a 
maximal generator g in a multiplicative group of integers modulo n; and encrypting 
arithmetic means for, in response to receipt of a plaintext m, generating a ciphertext C 
given by the following Equation (3) f using the public key gl, a private key n, and a 
random number r; and 

a decrypting device including decrypting arithmetic means for receiving the 
ciphertext C from the encrypting device and performing decryption in such a manner so 
as to derive the plaintext m satisfying the following Equation (8) using the Fermat's little 



theorem, 

grg^-^modn), (1) 
C=m- gl r (modn), (3)' 
m=C (mod p), (8) 

where gcd{s, q-1 } = 1 . 



Claim 10 (Original): An encrypting method comprising the steps of: 

generating two prime numbers p and q of which product is n=pq as a private key 

and generating as a public key gl and g2 respectively given by the following Equations 

(1) and (2) using two random numbers s and t and a maximal generator g in a 

multiplicative group of integers modulo n; and 

in response to receipt of a plaintext m, generating ciphertext elements CI and C2 

respectively given by the following Equations (3) and (4) using the public key {gi, g 2 }, a 

private key n, and random numbers rl and r2, 



g,=g ,(p - ,) (mod n), (1) 

g 2 =g t(lH) (mod n), (2) 

Ci=m-g, rl (modn), (3) 

C 2 =m-g 2 r2 (mod n), (4) 



where gcd{s, q-l} = l and gcd{t, p-l} = l. 
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Claim 1 1 (Currently Amended): An encrypting method comprising the steps of: 
generating prime numbers p and q of which product is n=pq, where p is a private 
key, and generating as a public key gi given by the following Equation (1) using a 
random number s and a maximal generator g in a multiplicative group of integers modulo 
n; and 

in response to receipt of a plaintext m, generating a ciphertext C given by the 
following Equation (3) f using the public key g i , a private key n, and a random number r, 

grg^-^modn), (1) 

C=m gl r (modn), (3)' 
where when information b is a size of p (bits), 0<m<2 b_1 and gcd{s, q- 

i>=i. 

Claim 12 (Original): A decrypting method comprising the steps of: 
receiving a ciphertext C=(Ci, C 2 ), which is an encrypted plaintext m, respectively 
given by the following Equations (3) and (4) using a public key {gi, g 2 }, a private key n, 
and random numbers rl and r2, the private key n being n=pq where p and q are prime 
numbers generated as a private key, gi and g 2 being respectively given by the Equations 
(1) and (2) using two random numbers s and t and a maximal generator g in a 
multiplicative group of integers modulo n; and 

performing decryption in such a manner so as to generate received ciphertexts a 
and b respectively given by the following Equations (5) and (6) using the Fermat f s little 
theorem and then derive the plaintext m satisfying the following Equation (7) from the 
received ciphertexts a and b using the Chinese remainder theorem, 



gi=g ,(p - 1} (mod n), 


(i) 


g 2 =g t(q " l) (mod n), 


(2) 


Ci^m-g! 1 ' 1 (mod n), 


(3) 


C 2 =mg 2 r2 (mod n), 


(4) 


a=Cj (mod p)=m (mod p), 


(5) 
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b=C 2 (mod q)=m (mod q), (6) 
m=aAq+bBp (mod n), (7) 
where gcd{s, q-l} = l, gcd{t, p-l} = l, Aq (mod p)=l, and Bp (mod q)=l. 

Claim 13 (Original): A decrypting method comprising the steps of: 

receiving a ciphertext C of an inputted plaintext m, given by the following 
Equation (3)' using a public key g b a private key n, and a random number r, the private 
key n being n=pq where p and q are prime numbers, p being generated as a private key, 
gi being given by the following Equation (1) using a random number s and a maximal 
generator g in a multiplicative group of integers modulo n; and 

performing decryption in such a manner so as to derive the plaintext 
m satisfying the following Equation (8) using the Fermat's little theorem, 

grg^ 0 (mod n), (1) 

Om- gl r (modn), (3)' 

m=C (mod p), (8) 
where gcd{s, q-1 } = 1. 
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